java-audit-skillAI驱动的Java代码安全审计技能,实现系统化、高覆盖率的漏洞挖掘。使用场景: (1) 审计Java/Kotlin项目寻找安全漏洞(0day挖掘、代码审计、安全评估) (2) 企业级代码库的安全审计(支持大型项目) (3) 需要高质量、低幻觉率的安全审计报告 (4) CI/CD集成的前期漏洞发现 触发关键词:Ja...
Install via ClawdBot CLI:
clawdbot install auroraproudmoore/java-audit-skillGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdPotentially destructive shell commands in tool definitions
eval(Calls external URL not in known-safe list
https://img.shields.io/badge/License-MIT-blue.svgUses known external API (expected, informational)
raw.githubusercontent.comUsage Guide
Loading usage data… refresh in a few seconds.
Scored May 16, 2026
AI Analysis
The skill appears to be a legitimate Java security auditing tool with appropriate external API usage for its stated purpose (license badges, GitHub references). While it contains shell commands and file access patterns typical for code auditing tools, these are documented as part of the audit workflow rather than hidden malicious behavior. No evidence of credential harvesting, data exfiltration, or intent override was found.
Audited Apr 18, 2026 · audit v1.0
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...